Known Issues

Release 22.7R2.12

Symptom: When two Windows Update Agent rules are configured, with the first rule having minimum version check disabled, second rule also works like minimum version check is disabled though it is enabled.

Condition: This is because the minimum version check attribute value is taken only from the first rule for both the rules.

Workaround: Enable the “Minimum version” checkbox for both rules or at least for the first rule, so the client returns patch details to the server. You can also move the rule that requires a minimum-version check to the top of the policy so the checkbox setting is passed to the client.

Symptom: PSAL is unable to launch the Java applet (JSAM) on Mac machines.

Condition: This occurs when an end user accesses a JSAM bookmark on a Mac machine with "HTTP Only Device Cookie" enabled.

Workaround: NA

Release 22.7R2.11

Symptom: Command actions such as Ping, ARP, Trace Route, Cluster RoundTrip, and TCP Dump under Gateway Troubleshooting in NSA fail to function.

Workaround: To continue using these commands, access the Gateway User Interface (GW UI) directly, where these troubleshooting options remain fully operational.

Symptom: The TOTP fallback server fails to function when used in conjunction with an LDAP authentication server.

Condition: This issue occurs when configuring TOTP as a fallback for LDAP-based authentication.

Workaround: N/A

Release 22.7R2.10

Symptom: ISAC switches to Classic Mode after establishing connection even when ICS UI shows UI mode as NewUX.

Condition: After upgrading to a new ICS software version.

Workaround: Admin needs to set the UI mode to NewUX for the changes manually after each upgrade.

Symptom: Blank screen seen during Bookmark access.

Condition: While trying to access user created bookmarks.

Workaround: Access these via the browse bar in the EUP landing page by directly giving the file share path. Ensure file share location IP is added under Users > Resource Policies > Files (Windows ACL and SSO).

Release 22.7R2.9

Symptom: JSAM launch fails on MAC OS Tahoe 26 RC version.

Condition: When JSAM is launched via Safari browser.

Workaround: Use Chrome browser to launch JSAM.

Symptom: When trying to create or update an Admin Realm through REST API, ICS returns “Unknown Element” error.

Conditions: When the json input in the post body contains “allow-admin-signin-external-port”.

Workaround: Remove “allow-admin-signin-external-port” attribute. It is no longer supported in ICS 22.7R2.9 and later releases.

Symptom: ISAC Connection using IPv6 is disconnecting when custom UDP port

Condition: When custom IPv6 UDP port is configured

Workaround: None

Symptom: SAML Logout via ISAC is taking time.

Workaround: None

Symptom: "IP Pool cannot be empty" error observed when switching from DHCP-based IP assignment to Pool-based for VPN Connection Profiles via REST API.

Condition: This occurs when the "ip-address-pool" attribute is provided before the "ip-address-assignment" attribute in the request body.

Workaround: Provide "ip-address-assignment" before the "ip-address-pool" attribute in the request body.

Symptom: System/User Binary import/XML import is failing with 22.7R2.9 gateway registered to 22.8R1.3.1 controller.

Condition: When trying to import the binary config using the Rest API (as form-data) or using NSA for importing config.

Workaround: System/User Binary/XML import to be done from Admin UI of ICS.

Release 22.7R2.8

Symptom: Not able to launch jsam

Condition: When the platform used is ubuntu24 version

Workaround: None

Symptom: HTML5 external storage will not work.

Condition: When admin configures domain joined machines.

Workaround: Admin can use non domain joined machines as external storage.

Symptom: Citrix Default ICA & custom ICA will not work.

Condition: When Citrix workspace client 2409 is used in client machine.

Workaround: Use Citrix workspace client 2405.

Symptom: Kernel panic is observed with RIP: __xfrm_state_delete

Condition: During Tunnel deletion

Workaround: None

Symptom: Kernel panic is observed with RIP: ip_forward_finish

Condition: During IP packet routing

Workaround: None

Release 22.7R2.6

Symptom: Not able to add file share path as user bookmark.

Condition: When file share path contains special characters.

Workaround: Access via root share path.

Symptom: Unable to go back to previous folder.

Condition: When folder name contains special characters like #.

Workaround: Create the folder without special characters.

Symptom: VDI bookmark is not shown in the End user page and works fine in Admin UI page.

Condition: When the Admin imports 9.x XML/user configuration on ICS 22.7R2.6.

Workaround: Select the Role and click Save Changes in the UI options page.

Symptom : Joining node is showing enabled and unreachable when node joins in AP cluster.

Condition : When a Node joins a new cluster and switches to AP mode, it receives the cluster VIP.

Workaround: Join node in AA cluster mode and then convert into AP cluster mode or reboot the setup.

Release 22.7R2.3

Symptom: Cluster Upgrade: Device gets stuck in "started all services" when upgrading to 22.7R2.3 image

Conditions: Under rare scenarios, when the vApp options got disabled for the VM on ESXi, and the backup vaIVEConfig is not in sync with the current config.

Workaround: None. Need to do rollback and do RDC, and then remove the backup vaIVEconfig file.

Symptom: When a full config export is triggered, xml download progress is not seen.

Condition: When full config export is triggered the progress bar of the xml download is not seen some times

Workaround: XML download happens in the background, the progress bar is not visible

Symptom: Folder view is missing in 22.X

Conditions: For Citrix listed applications.

Workaround: Currently we support block/list view.

Release 22.7R2.1

Symptom: Citrix Storefront web bookmark over HTML5 is not working with 2203/2402 LTSR version.

Condition: When ICS client access is selected with HTML5.

Workaround: User can use ICS client access as CTS/WSAM.

Symptom: ICS upgrade from 22.7R2.1 or later fails through REST API.

Conditions: Occurs during upgrades from 22.7R2.1 to newer versions.

Workaround: None. Use Admin UI for upgrades instead.

Symptoms: Importing mTLS Client Certificates and Keys/bin/tar: tlscerts/cert.pem: Not found in archive message seen on ICS console after upgrade to 22.7R2.1

Condition: On an upgrade to 22.7R2.1

Workaround: None. Functionality is not affected. These message can be ignored.

Symptom: Under rare conditions, CPU utilization goes to an average of 30 percent

Condition: When Adaptive Auth is enabled on the ICS cluster.

Work around:

•Disable UEBA from System > Configuration > Behavioural Analytics.

•Wait for 15 mins

•Re-enable UEBA.

Symptom: Invalid Domain name error seen when AD domain name is having "0"

Condition: Domain name containing 0 fails to save with error "Invalid Domain name".

Workaround: Upgrade of ICS from older release will work but need to Reset join. New AD configuration should be without 0 in domain name.

Symptom: AD domain join takes 15 mins to join.

Condition: Upgrade to 22.7r2 or later.

Workaround: Save changes of AD config does a AD domain join

Symptom : GCP - Adding management port details of other in cluster is returning with invalid IPv6 gateway error message.

Condition : When adding the details of management port for another node in cluster environment.

Workaround: Create cluster with two interfaces (device deployed with internal and external port only).

Release 22.7R2

Symptom: VDI desktop client launch fails.

Condition: When user uses latest VDI horizon client 2309.

Workaround: User must use VDI horizon client 2103.

Symptom: iveConcurrentUsers count is 0 in SNMP Traps.

Conditions: When max users are signed in to ICS and tries to send iveMaxConcurrentUsersSignedIn SNMP trap. This SNMP trap has the iveConcurrentUsers set to 0.

Workaround: None.

Symptom: HTML5 RDP login via smart card will not work.

Conditions: When Windows client machine is configured with windows Hello PIN and Gemalto smart card is used to login via RDP

Workaround: Disable Windows Hello will work

Symptom : "Total Maximum Bandwidth" configuration is taking more value than interface limit in hyper-v platform

Condition: In Hyper-V platform when configuring "Total Maximum Bandwidth" in Network overview page

Work Around: Admin can configure the "Total Maximum Bandwidth" lesser than interface speed limit.